The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals.
Zoho does not collect, use, store, or maintain health information protected by HIPAA for its own purposes. However, Zoho Sheet provides certain features (as described below) to help its customers use it in a HIPAA compliant manner.
HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.
Zoho Sheet, as a part of the Office Suite from Zoho WorkDrive, provides all the HIPAA compliance features available in WorkDrive.
Zoho Sheet features that help with HIPAA compliance
Following are the Zoho Sheet specific features that can help users use Zoho Sheet in a HIPAA compliant manner:
Control access for collaborators
User-specific permission - Share spreadsheets with user-specific permission levels (View, View and Comment, Edit, Share) and choose to restrict, grant, or remove access anytime.
Lock cells/sheet - Lock desired cell range or worksheets for specific collaborators and ensure a controlled access to your data.
Check Out/In - Pause and resume live collaboration without removing the sharing access for collaborators for uninterrupted working.
Auto file backup
Version History - Zoho Sheet keeps automatic backed up versions of your spreadsheet for your reference at any given time. You can also view version specific changes and revert to older versions of the file. Learn more
Tracking changes
Audit Trail - This allows you to keep track of all changes that are made by you or the collaborators inside the spreadsheet. You can filter the view based on user, sheet, date, or cell range as well. This information will be available until the document is permanently deleted. Learn more
Publish with restrictions
Zoho Sheet allows you to disable file export/download and to hide and lock formulas cells in your spreadsheet while publishing the file/sheet/range within the organization or externally. Learn more
Data Encryption
Data is encrypted during transit and encryption at rest by default for content written in Zoho Sheet.
Note: Any data entered in Zoho Sheet is considered as ePHI (electronic protected health information).
Kindly note that the content presented here is not to be construed as a legal advice. Please contact your legal advisor to learn how HIPAA impacts your organization and what you need to do to comply with HIPAA.